magmaus3/continuwuity
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add support for binding to a specific interface for url previews

Browse source 
This is helpful to, for example, bind to an interface that can
only access the public internet. The resulting setup is less
maintenance-heavy / error-prone than manually maintaining a deny/
allowlist to protect internal resources.

Signed-off-by: Jade Ellis <jade@ellis.link>
This commit is contained in:
Jade Ellis 2024-12-07 23:27:56 +00:00
parent fe1ce521aa
commit 52cee65748
No known key found for this signature in database
GPG key ID: 8705A2A3EBF77BD2
3 changed files with 41 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

10
conduwuit-example.toml
View file

@ -1117,6 +1117,16 @@
#
#ip_range_denylist = ["127.0.0.0/8", "10.0.0.0/8", "172.16.0.0/12",
# Optional interface to bind to with SO_BINDTODEVICE for URL previews.
# If not set, it will not bind to a specific interface.
# This uses [`reqwest::ClientBuilder::interface`] under the hood.
#
# To list the interfaces on your system, use the command `ip link show`
#
# Example: `"eth0"`
#
#url_preview_bound_interface =
# Vector list of domains allowed to send requests to for URL previews.
# Defaults to none. Note: this is a *contains* match, not an explicit
# match. Putting "google.com" will match "https://google.com" and